Privacy Policy

This Privacy Policy describes how Alma Servizi, located at Via Piemonte 62, 00187 Rome (“we”, “us”, “our”), collects, uses, stores and protects personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable Italian legislation.

By using this website, you acknowledge and accept the terms of this Privacy Policy.

Data Controller

The Data Controller is:

Alma Servizi
Via Piemonte 62
00187 Rome – Italy
Email: info@ccpitaly.com

Types of Data We Collect

We may collect the following categories of personal data:

a) Data you voluntarily provide

• Full name

• Email address

• Phone number

• Company name

• Information submitted through contact forms or email communication

b) Automatically collected technical data

• IP address

• Browser type and version

• Device information

• Usage data (pages visited, time spent, clicks)
  Collected through cookies and similar technologies.

Cookie

For details on cookie usage, please refer to our Cookie Policy.

We do not collect any special categories of personal data (e.g., health, biometric, religious beliefs) unless strictly necessary and explicitly consented to.

Purpose of Processing

Personal data may be processed for the following purposes:

• Responding to enquiries and contact requests

• Providing information about our services

• Managing commercial and pre-contractual relationships

• Improving website functionality and user experience

• Fulfilling legal or regulatory obligations

• Ensuring website security and fraud prevention

Legal Basis for Processing

The processing of personal data is based on:

• Consent (Art. 6(1)(a) GDPR) for contact requests, forms and newsletter subscriptions

• Performance of a contract or pre-contractual measures (Art. 6(1)(b))

• Compliance with legal obligations (Art. 6(1)(c))

• Legitimate interest (Art. 6(1)(f)) for website security, analytics and service improvement

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

• Contact form submissions: up to 24 months

• Commercial/contractual documents: as required by accounting, tax and regulatory rules

• Technical logs: according to security policies and applicable laws

When data is no longer necessary, it is securely deleted or anonymised.

Data Recipients and Sharing

Personal data may be shared with:

• IT and hosting providers

• Professional advisors (legal, administrative, compliance)

• Service providers strictly necessary for website operation

• Public authorities when required by law

We never sell personal data to third parties.

Where external providers process data on our behalf, they are appointed Data Processors under Art. 28 GDPR and bound by contractual obligations.

International Transfers

If data is transferred outside the EU/EEA, we ensure compliance with GDPR through:

• Standard Contractual Clauses (SCCs)

• Adequacy decisions by the European Commission

• Additional security safeguards